john-users - Re: HA: where are the salts?

Openwall wordlists collection for password cracking (20+ languages)

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Thu, 31 May 2012 08:17:05 +0400
From: Solar Designer <solar@...nwall.com>
To: Dmitriy Serebryannikov <DSerebryannikov@...ecurity.ru>
Cc: Aleksey Cherepanov <aleksey.4erepanov@...il.com>,
	hashrunner <hashrunner@...ecurity.com>,
	"john-users@...ts.openwall.com" <john-users@...ts.openwall.com>
Subject: Re: HA: where are the salts?

Hi,

On Thu, May 31, 2012 at 03:06:11AM +0000, Dmitriy Serebryannikov wrote:
> Can you provide examples of these hashes?

All of the dcc2, md5(phpBB3), and md5(Wordpress) hashes are missing
their salts.  For example, a full phpass hash encoding is 34 characters
long, but those provided to us in the contest are 27 characters.

Also, the blowfish(OpenBSD) hashes have slightly corrupted salt strings,
but folks on our team should be able to repair that. ;-)

Alexander